Even with a delay of 2 seconds, I can check your password against the most-common 10,000 passwords list in 6 hours. And I can run the check in parallel. So if

Even with a delay of 2 seconds, I can check your password against the most-common 10,000 passwords list in 6 hours. And I can run the check in parallel. So if I have 1,000 email addresses I can find all the users with low-entropy passwords in just 6 hours.